For When You Can't Have The Real Thing
[ start | index | login ]
start > Windows > Azure > Azure MFA for NPS

Azure MFA for NPS

Created by dave. Last edited by dave, 21 days ago. Viewed 39 times. #1
[edit] [rdf]
labels
attachments
(2019-05-28)

Azure Multifactor Authentication for Network Policy Server

Notes:

  • I had problems with NPS more than anything. For some reason I got two of them into a state where they wouldn't stop, they'd just say "Stopping..." in the Services window and never come back from that. Finally a competent Windows admin stepped in and got it working again.
  • We had to enroll one user in the Azure AD service to install the extension.
  • On our Fortigate, I had to change the timeouts so that users would have time to press the application to grant permission to themselves.
config sys global
set remoteauthtimeout 30
end
conf user radius
edit "MyRadiusServer"
set timeout 30
next
end
The Global parameter tells the firewall how long to wait on authentication services before giving up on the attempt; the server-specific setting tells the firewall how long to wait on that particular authentication service before repeating the request. If the radius request is repeated, the user could get bombarded with app requests for authentication; so we have made the server timeout match the global timeout.
no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt